Apache Cordova iOS arbitrary plug-in Execution Vulnerability (CVE-2015-5208)

Apache Cordova iOS arbitrary plug-in Execution Vulnerability (CVE-2015-5208)
Apache Cordova iOS arbitrary plug-in Execution Vulnerability (CVE-2015-5208)

Release date:
Updated on:

Affected Systems:

Apache Group Cordova iOS <= 3.9.1

Description:

CVE (CAN) ID: CVE-2015-5208

Apache Cordova is the library used to create a local mobile application.

Apache Cordova iOS 3.9.1 and earlier versions have security vulnerabilities. Attackers can trick users into clicking malicious links to execute arbitrary plug-ins.

<* Source: Muneaki Nishimura
*>

Suggestion:

Vendor patch:

Apache Group
------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://cordova.apache.org/docs/en/2.5.0/guide/getting-started/ios/

This article permanently updates the link address: